Software supply chain security is an industry-wide problem that impacts both open source and proprietary software.
With attack vectors present at every stage of the software development process and thousands of dependencies, this is a technical debt that demands innovative solutions, scalable processes, and years of effort to address.
The Eclipse Foundation and the Adoptium Project are leading the way with Eclipse Temurin and a common security infrastructure to make open source software more secure.
The Adoptium Working Group promotes and supports high-quality, TCK certified runtimes and associated technology for use across the Java ecosystem.